Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
File:                     134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft (raw, json)
Hash identifier:          cJdpvZYr+qqpClQlFQJ4n9xf6OLVbR71r/fy3MFbVUk=
Subject key identifier:   06:BA:48:BF:6D:85:95:74:EE:32:92:F1:6C:1E:12:E4:36:AA:42:F6
Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E
Certificate issuer:       /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
Certificate serial:       7A4B9F6C3702E379D3D1DD07EB9EDA1D3AFC2ACD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
Manifest number:          F8
Signing time:             Fri 24 Jul 2026 05:30:27 +0000
Manifest this update:     Fri 24 Jul 2026 05:25:27 +0000
Manifest next update:     Sat 25 Jul 2026 06:40:27 +0000
Files and hashes:         1: 3230332e3137342e362e302f32342d3234203d3e20313531323531.roa (hash: q9iWdKLAdHbfEGWeTQTJnj5rz99RfjAIuFKzrZu0in8=)
                          2: 3230332e3139312e322e302f32342d3234203d3e20313531323531.roa (hash: e6+G3ic+FYJSXMDF4S5renCxEofbarg+TsDpBpy5bJM=)
                          3: 3230322e3135332e372e302f32342d3234203d3e20313531323531.roa (hash: tfjUhuAMRoHw+XmcNvK63TdXVM18RqXuY24SvpDXfT8=)
                          4: 3230322e3135382e3234322e302f32342d3234203d3e20313531323531.roa (hash: gGkuc6EmqWxF5c3YAslxD/isaTWNxlZKyRi45M7xUFY=)
                          5: 3230322e3137322e372e302f32342d3234203d3e20313531323531.roa (hash: XU32qEfDo85EorqSryLTBLXpsTPsVSeLnNoBf3B27Fc=)
                          6: 3230332e31362e36332e302f32342d3234203d3e20313531323531.roa (hash: vFdNFHiN3TMOKZPfat+9ys9S2MH2DGTTS/y9t11B0o8=)
                          7: 134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl (hash: ymb9s29WyE8PvZjywuO6/Dff/XbBnzRoyUeeKVDw5mw=)
                          8: 3230332e3139312e372e302f32342d3234203d3e20313531323531.roa (hash: zSnSXFOuavokFDJ0LSAvvl1QDzFRGSxODkOT+pQTD7k=)
                          9: 3230332e3134322e3231392e302f32342d3234203d3e20313531323531.roa (hash: BhfTobQuLUUFCm40O0UhVTcZ0Jym4fymlhVRNpS3frw=)
                          10: 3230322e3137312e3233322e302f32342d3234203d3e20313531323531.roa (hash: 37J4UChBWQno0PS67CISco/dgUXgy2QBAlmPmhCNaN0=)
                          11: 3230332e31392e312e302f32342d3234203d3e20313531323531.roa (hash: /40aDXtlZCEP2hquD991/eX5+Ztiga8tf5eQrwVIQIQ=)
                          12: 3230332e31372e3234392e302f32342d3234203d3e20313531323531.roa (hash: 8fNA7/e7ezAblkvOUimvp93vFc/b3lK5w+sKMxA5ybc=)
                          13: 3230322e3137332e362e302f32342d3234203d3e20313531323531.roa (hash: CWFmQv65CxvUZcuHEzxOtvNzP1xhd2hPja2Ei26zyso=)
                          14: 3230332e3130302e36302e302f32342d3234203d3e20313531323531.roa (hash: lBCGwmuKofwgcufx94VrX8pzt30gxmwgJFLQKbe8WeA=)
                          15: 3230332e3230312e3138312e302f32342d3234203d3e20313531323531.roa (hash: yJ3jHnPWhAaAMRxei37IPvzElQ724dxo+7tcpvoO8fw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4b:9f:6c:37:02:e3:79:d3:d1:dd:07:eb:9e:da:1d:3a:fc:2a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E
        Validity
            Not Before: Jul 24 05:25:27 2026 GMT
            Not After : Jul 25 06:40:27 2026 GMT
        Subject: CN=06BA48BF6D859574EE3292F16C1E12E436AA42F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:a3:64:26:13:dc:e6:3a:be:38:95:09:01:
                    24:97:59:09:63:44:41:d3:b4:a1:b3:bb:44:8d:89:
                    38:49:6c:46:c3:cf:01:c7:29:49:18:d8:14:af:ff:
                    b8:f6:61:3d:bc:09:8f:df:63:b3:d4:44:d7:28:8a:
                    9a:dc:ef:67:a7:83:2b:24:59:57:8a:ff:5e:9d:e1:
                    76:30:95:03:41:a8:95:28:41:2e:c1:49:1b:91:40:
                    fa:74:f3:78:4c:d4:92:2f:c5:3f:79:a9:ec:27:f1:
                    6a:80:f4:f6:c0:a4:cd:56:67:06:ff:e9:7c:ab:80:
                    86:31:23:6b:74:9b:98:33:44:7a:4d:5f:a3:8a:c6:
                    a8:d4:4d:82:14:ae:5c:c4:d5:e9:d9:a3:0d:da:32:
                    82:58:99:ac:22:33:da:ae:8b:f4:47:01:43:61:20:
                    08:83:49:43:36:21:37:5a:3b:6e:1f:c2:a6:bd:74:
                    81:c3:3f:3a:76:9c:57:0d:83:59:ad:e3:44:2b:0c:
                    5e:ab:c0:1e:c9:a3:a3:01:63:d9:c1:fa:70:8e:9c:
                    df:b5:44:a5:48:c1:89:b4:09:66:7a:34:d7:2f:38:
                    c7:bf:53:6b:0e:4a:24:d8:09:e0:9b:54:96:91:40:
                    4c:e0:2b:f8:26:d6:7e:76:a9:21:f2:58:2c:65:a2:
                    fa:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BA:48:BF:6D:85:95:74:EE:32:92:F1:6C:1E:12:E4:36:AA:42:F6
            X509v3 Authority Key Identifier:
                keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4d:16:49:f5:6d:76:2f:0c:f7:87:3b:cb:bc:0e:55:bc:7b:
         61:ec:4e:b9:9c:c3:9e:cf:34:1a:31:f3:cc:f5:df:c1:34:8a:
         39:61:f0:d3:de:03:ed:1d:4d:90:cd:dd:dc:a1:58:fb:5c:de:
         2b:61:d5:75:24:02:f2:0c:22:b8:43:bb:ae:5b:a7:2d:de:94:
         44:9d:31:a4:36:dd:45:8a:2c:14:9e:cd:25:bf:28:3a:bd:6c:
         a1:10:eb:db:0e:c4:a8:48:76:c4:70:32:4e:46:16:5e:04:f5:
         aa:b1:98:e7:e7:9d:29:9a:70:07:d3:f5:dd:56:2a:77:21:cb:
         01:30:c2:8f:64:54:83:2e:42:a8:5d:9d:db:1d:e7:61:88:6a:
         29:8a:ed:23:83:8e:74:b8:b2:1b:03:0e:98:4f:fe:6b:7d:7b:
         ed:97:2d:1d:eb:84:cd:1f:61:29:4e:4f:52:6a:05:e3:34:42:
         07:85:7f:54:6f:74:11:d2:eb:59:fe:2d:2f:6b:50:67:d2:2d:
         f4:21:45:26:0e:4b:07:b7:f3:d3:9e:48:87:f0:fd:14:1e:51:
         ea:f0:e9:73:92:27:39:1d:0b:0f:82:e3:8d:cd:91:49:d5:11:
         e4:f7:03:29:ad:ec:e3:af:9b:05:c9:03:75:55:95:3f:6d:bc:
         0b:66:85:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:50:44 2026 by rpki-client